Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ee2a7827-6a60-39ad-81eb-8bcfcd6590ab.roa
File:                     ee2a7827-6a60-39ad-81eb-8bcfcd6590ab.roa (raw, json)
Hash identifier:          +2gYquhIi0B/d5DCL0LW6NM6F34nns4ELp6vDelBhhQ=
Subject key identifier:   FA:B2:A5:62:3C:A1:A4:5C:0E:C0:D0:00:0D:66:CC:4A:44:ED:A4:1B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CAE5E572677038AE5CE8CC580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ee2a7827-6a60-39ad-81eb-8bcfcd6590ab.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     9541
IP address blocks:        66.167.15.0/24 maxlen: 24
                          66.167.90.0/24 maxlen: 24
                          66.167.147.0/24 maxlen: 24
                          66.167.166.0/24 maxlen: 24
                          66.167.169.0/24 maxlen: 24
                          67.102.7.0/24 maxlen: 24
                          67.102.189.0/24 maxlen: 24
                          67.102.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:57:26:77:03:8a:e5:ce:8c:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ca2ca55d-3bf0-4e4d-b7bf-8fc290e0dee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:06:8b:fe:a6:06:3a:8a:18:4b:16:44:a5:
                    21:85:30:07:95:ba:53:09:05:1c:5d:61:84:5e:a3:
                    1c:44:33:c9:a2:cf:b2:8e:1f:10:36:19:25:b7:e5:
                    07:8e:26:ba:5b:3c:ca:c9:a4:8d:35:9a:aa:3e:98:
                    ee:98:e6:52:1b:29:7a:f0:5c:75:8a:b2:b0:7e:0e:
                    d3:f4:09:1d:11:7e:ff:b8:b1:e0:0a:ae:6a:63:e1:
                    21:c7:4a:20:11:a2:8a:c5:a5:f4:02:ac:72:c0:9f:
                    fc:67:f6:e0:e6:98:ab:7e:d1:76:fe:c2:f8:62:e1:
                    90:03:93:43:a8:aa:20:d9:31:5a:d6:45:13:36:0b:
                    1a:23:31:c1:ca:a4:bd:26:c5:4e:c3:78:7d:b3:98:
                    09:b1:fe:b0:04:20:18:80:3d:6b:af:e6:48:ac:b1:
                    2a:7c:3a:d5:ce:8c:0d:a1:7e:13:ea:e1:07:54:b4:
                    cb:06:97:ca:14:1e:7c:41:c8:58:b6:c9:86:76:71:
                    e7:ab:d9:9d:e5:44:98:59:a3:e5:80:db:01:9c:c4:
                    69:a9:03:b5:59:03:2c:6e:a2:1c:13:35:2c:e9:f8:
                    27:08:d4:56:e0:37:d3:93:98:33:1d:35:ee:66:ac:
                    f0:bd:78:bb:a3:92:18:e0:ad:33:b5:b4:be:1c:15:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:A5:62:3C:A1:A4:5C:0E:C0:D0:00:0D:66:CC:4A:44:ED:A4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ee2a7827-6a60-39ad-81eb-8bcfcd6590ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.167.15.0/24
                  66.167.90.0/24
                  66.167.147.0/24
                  66.167.166.0/24
                  66.167.169.0/24
                  67.102.7.0/24
                  67.102.189.0/24
                  67.102.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:90:38:66:73:4f:e7:03:f3:91:71:a9:00:f9:86:d5:4a:
         6b:9b:7c:7a:71:1a:89:73:34:cf:2e:b7:7e:37:b5:e2:0d:a0:
         bb:8e:fd:2a:4f:64:69:45:22:41:40:f9:d1:9a:65:3b:de:62:
         19:fa:15:42:92:0f:03:21:cc:33:9a:45:0a:46:c2:3e:85:cc:
         02:ab:53:20:e5:20:2d:4b:d4:59:34:1d:7c:93:23:07:d0:d8:
         55:d1:aa:4a:fa:7b:9b:eb:5e:0b:08:4f:0d:d1:72:a1:86:72:
         97:60:02:aa:eb:45:d0:11:c4:e4:a6:28:dd:dc:1b:92:56:de:
         ee:6a:26:11:67:8c:50:07:83:2c:af:a8:9b:42:fb:8a:1e:cf:
         30:78:6e:6d:93:b4:5e:12:05:8e:5c:f0:66:cf:45:14:c5:20:
         dd:f0:b7:7c:a5:31:96:99:70:37:81:98:57:02:8e:36:fa:07:
         ef:fc:20:5d:45:cb:a6:72:41:f5:54:69:b2:71:28:23:9e:af:
         d0:a7:7e:fb:b8:89:62:95:31:49:9e:4b:07:c8:f1:a4:59:34:
         a0:3c:6c:f3:a5:82:54:de:08:e3:9d:12:e7:dd:d9:0d:da:62:
         32:5c:ea:be:c7:9f:f8:a7:7c:84:db:02:87:c3:e6:59:d8:0f:
         20:be:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:53 2026 by rpki-client